Yeah that was the intention; to keep everything self-hosted. Although cloudflare is great for some tasks one would have to take their word that they are not reading user data when they act as the TLS termination.
I like the services you host! They are usable, i.e. performant and fast loading. For me it is okay for you to protect (invidous and nitter) with anubis from bot ddos, while human users can still use them, instead of the imo worse cloudflare 🥰. I will also post this in the feedback section.